This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          LnNnkchsng/zuEPQTKrecB63QwU6yDWmqW2LBVm19o8=
Subject key identifier:   34:A3:50:A8:A6:87:C5:F8:41:C5:57:68:A3:7A:41:C0:C7:6B:F7:FC
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       019B4EF214E138AB3C188B83E4777A8D9F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          06D3
Signing time:             Wed 24 Dec 2025 06:00:46 +0000
Manifest this update:     Wed 24 Dec 2025 06:00:46 +0000
Manifest next update:     Thu 25 Dec 2025 06:00:46 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: MA25K/+N55F1DDSE5MKYGG28s2hgdZOx1W8dNWxBH6M=)
                          2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
                          3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4e:f2:14:e1:38:ab:3c:18:8b:83:e4:77:7a:8d:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Dec 24 06:00:46 2025 GMT
            Not After : Dec 25 06:00:46 2025 GMT
        Subject: CN=34a350a8a687c5f841c55768a37a41c0c76bf7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:71:c2:a7:6c:cd:67:88:03:0f:68:45:fd:
                    a8:46:30:17:b1:ac:c8:c6:50:4c:d9:3a:5b:b3:91:
                    27:dd:35:8d:cf:15:db:23:e7:14:49:98:64:df:18:
                    f3:4a:da:42:1a:70:14:ea:dc:4a:4f:cb:78:b5:20:
                    70:76:39:79:35:9b:89:8e:2e:a2:c7:83:75:82:59:
                    d3:23:1d:04:47:5a:e5:9a:ad:57:8e:19:a2:df:81:
                    0e:1a:50:84:66:b0:eb:a4:3a:1d:66:1d:ca:3d:0c:
                    68:c3:95:55:bc:64:fd:40:3e:65:19:f8:0d:e9:09:
                    9c:2f:05:55:b5:75:fb:63:59:6c:93:02:96:91:bd:
                    75:f3:aa:67:8b:c4:ed:95:5b:67:b6:12:b3:7f:7b:
                    92:7b:7e:f3:0a:c3:e3:da:bf:ad:36:54:44:6e:66:
                    f2:e5:bc:30:ff:0b:aa:a1:0b:6f:b3:da:b0:e4:1a:
                    cd:a6:52:26:4e:8d:53:fb:8c:52:01:7e:4a:48:56:
                    ea:3d:94:9c:85:8b:82:eb:f3:46:01:ef:76:8e:c8:
                    ce:f1:16:f8:36:e2:d1:aa:f6:79:96:47:53:ba:54:
                    f2:84:6e:58:18:08:68:3c:d6:48:30:ad:03:4c:23:
                    68:60:2b:b7:08:fa:4e:08:68:99:8d:b5:51:ca:6c:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A3:50:A8:A6:87:C5:F8:41:C5:57:68:A3:7A:41:C0:C7:6B:F7:FC
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0b:8c:62:2a:7c:cd:6e:d4:bd:94:eb:e4:fd:83:5b:1c:df:
         19:75:23:ce:a0:bb:a9:d3:0e:9a:2a:5d:56:67:af:d2:77:37:
         64:5f:50:b8:a1:f5:c1:3f:79:75:75:a2:2c:44:bd:bc:ca:d2:
         71:0b:41:00:f9:21:2f:1e:7d:79:af:51:f8:9f:25:72:04:32:
         47:a7:03:55:66:88:ad:2b:0d:8a:9e:47:d2:58:e2:2f:39:6f:
         5e:4a:dd:39:ea:f9:b9:ec:15:9b:3f:66:26:b3:9a:35:4b:de:
         d9:2f:48:d5:91:09:ad:30:b0:7e:e1:72:00:ef:6f:58:85:4b:
         5b:a6:6e:77:81:3a:94:9e:bc:6c:b9:3a:09:ff:84:ec:22:af:
         ec:a2:2d:5a:19:ad:d1:96:d9:1e:f3:f0:2f:5f:53:ac:3c:53:
         e1:54:e4:59:ae:bb:70:df:da:3a:75:6a:ee:b2:82:35:04:c3:
         47:4f:d2:e6:0b:fb:fe:e2:c8:52:83:41:af:8d:f9:ca:ba:8a:
         52:97:c7:1d:59:67:f6:48:c4:c4:6c:6e:b8:ca:34:b1:8c:ac:
         9f:30:22:ec:93:a1:99:7d:ba:a6:e3:99:c6:de:6e:e4:28:08:
         6f:e7:1d:2d:5a:0b:fb:3c:54:40:3b:a3:da:81:bb:59:59:13:
         86:14:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:55:08 2025 by rpki-client